Physical Security Measures
Physical security controls and secure areas are used to minimize unauthorized access, damage, and interference to information and information systems. Access to areas containing sensitive information must be physically restricted. Individuals requesting access to the data center are to be enrolled in a structured and documented provisioning process for ensuring the integrity of the person entering the facility.
Visitors must be properly identified with a current, valid form of identification and must be given a temporary facility badge allowing access to certain areas within the data center. A log of this activity is retained for audit and security purposes.
Equipment Control
The assigned user of IT resources is considered the custodian for the resource. If the item has been damaged, lost, stolen, borrowed, or is otherwise unavailable for normal business activities, the custodian must promptly inform the involved department manager.
Sensitive IT resources located in unsecured areas should be secured to prevent physical tampering, damage, theft, or unauthorized physical access. An inventory of all computer equipment and media is maintained to account for restricted and confidential information. When feasible, IT equipment is to be marked with some form of identification that clearly indicates it is the property of the Michigan Tech.
Computer Data and Media Disposal
Proper data disposal is essential to controlling sensitive data including student records, personnel records, financial data, and protected health and credit card information. If the information on those systems is not properly removed before the equipment is disposed of, or transferred within the University, that information could be accessed and viewed by unauthorized individuals.
Media or devices containing sensitive information transferred between departments or removed from service must be properly erased, as outlined within the Data Sanitization Guidelines to ensure that all computers and electronic media are properly sanitized before disposal.